Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: r3bWCWAmJSjoa2DPsQS9mSpR/Dy974+EyBSkMp44lt0=
Subject key identifier: 2C:9A:1D:9B:96:91:31:DA:AE:C1:36:D1:1C:11:03:E2:22:76:FA:18
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 0197488CFF9578AA83511DB6018DE1EDBBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 064C
Signing time: Sat 07 Jun 2025 04:01:29 +0000
Manifest this update: Sat 07 Jun 2025 04:01:29 +0000
Manifest next update: Sun 08 Jun 2025 04:01:29 +0000
Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: VDIP9TAQgnXc3hqe1X6737rF3BO1y2f1r0RWVtedqm0=)
2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ff:95:78:aa:83:51:1d:b6:01:8d:e1:ed:bb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: Jun 7 04:01:29 2025 GMT
Not After : Jun 8 04:01:29 2025 GMT
Subject: CN=2c9a1d9b969131daaec136d11c1103e22276fa18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:18:9e:81:7e:1f:62:89:d3:c1:0a:2b:6c:d6:
50:56:0a:2c:68:06:77:9c:39:12:5e:5d:17:26:73:
b2:d4:9f:5e:d3:bc:2d:9d:08:b6:2a:6d:23:41:9a:
31:d2:13:4a:8d:0a:43:cd:2a:3e:37:10:be:96:e6:
16:68:2f:f8:81:8e:49:8d:71:8d:13:31:ce:8e:03:
be:6a:44:ee:a9:d8:06:72:28:ea:fa:d6:33:d7:1f:
62:46:d7:f8:60:6a:88:1f:32:00:41:c7:1b:a8:80:
5f:ed:a8:8e:ae:67:e4:8e:5b:70:9d:1e:36:79:0f:
a3:07:db:b5:56:99:12:e6:45:cf:36:d9:d2:f1:e5:
e8:49:aa:f8:88:68:65:24:84:7d:be:03:67:5e:5e:
9d:89:1f:8a:b0:18:1b:9e:b7:2e:26:bf:e9:fd:00:
17:4f:cb:08:f1:f5:13:0a:58:71:9d:fc:7e:a6:9d:
9f:e5:43:b7:cd:4f:5f:38:4c:e9:0f:bd:99:21:55:
60:51:ee:e3:9c:a1:cc:23:87:9c:f1:1f:20:51:3b:
be:75:47:7e:a9:0e:58:ff:fa:e0:c4:7f:78:a2:1c:
ec:f0:46:61:36:f0:7f:6d:eb:65:2c:ac:dd:b0:2d:
61:69:92:76:37:3f:74:5b:86:7e:25:fe:5a:cb:9d:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:1D:9B:96:91:31:DA:AE:C1:36:D1:1C:11:03:E2:22:76:FA:18
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:8c:e0:3f:27:44:ab:51:79:1f:ca:51:7c:21:b4:21:4c:
83:14:b2:78:52:19:97:c0:89:50:7d:4c:f5:a4:99:79:a1:f1:
99:54:79:ae:c1:c6:4e:3a:3b:7a:c0:d5:6d:04:29:dc:84:91:
71:ae:17:44:9d:b8:1c:4b:9a:7f:c0:01:f4:89:44:03:01:6d:
95:41:fd:c2:74:41:6b:2a:64:56:24:3e:d1:5d:18:c7:a5:dd:
8f:01:d6:f3:b5:21:8d:68:32:23:1b:ef:7a:b7:e0:c0:e4:31:
7e:fb:1c:82:5d:10:b8:0e:bd:8b:89:34:0d:04:9c:93:d5:f2:
c0:4e:ee:23:bb:54:03:36:fc:86:65:92:f1:07:60:a0:01:f5:
53:f2:de:f7:04:4c:2c:b2:79:1d:a7:ec:a4:5a:51:ab:19:ce:
3e:d7:21:89:10:97:05:38:f1:f9:4e:7d:af:a4:9c:38:43:a8:
fa:56:db:b7:9c:43:9a:97:0f:67:05:c2:8d:d7:fe:dc:92:3f:
4b:67:7e:89:29:b1:c0:bc:fb:f8:90:cd:20:2d:e0:15:4c:74:
c2:ec:bf:62:52:53:c9:af:58:cc:7f:f6:57:8f:45:72:bd:53:
c7:08:c8:30:dc:89:b5:0d:28:09:9f:aa:45:4a:4d:fa:f0:ed:
a4:6c:86:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjP+VeKqDUR22AY3h7bvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTQ1MTY0YzU3MmVkZGU1ZGYyNTM5MTdjYzEyYTJkZmQz
OThiOTcwHhcNMjUwNjA3MDQwMTI5WhcNMjUwNjA4MDQwMTI5WjAzMTEwLwYDVQQD
EygyYzlhMWQ5Yjk2OTEzMWRhYWVjMTM2ZDExYzExMDNlMjIyNzZmYTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hiegX4fYonTwQorbNZQVgosaAZ3
nDkSXl0XJnOy1J9e07wtnQi2Km0jQZox0hNKjQpDzSo+NxC+luYWaC/4gY5JjXGN
EzHOjgO+akTuqdgGcijq+tYz1x9iRtf4YGqIHzIAQccbqIBf7aiOrmfkjltwnR42
eQ+jB9u1VpkS5kXPNtnS8eXoSar4iGhlJIR9vgNnXl6diR+KsBgbnrcuJr/p/QAX
T8sI8fUTClhxnfx+pp2f5UO3zU9fOEzpD72ZIVVgUe7jnKHMI4ec8R8gUTu+dUd+
qQ5Y//rgxH94ohzs8EZhNvB/betlLKzdsC1haZJ2Nz90W4Z+Jf5ay50wKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyaHZuWkTHarsE20RwRA+IidvoYMB8GA1UdIwQY
MBaAFCPkUWTFcu3eXfJTkXzBKi39OYuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEt
NjZhYTJhMjMyMzllLzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82OGE0YjItNTg5NC00N2M1LWJlMDEtNjZhYTJhMjMyMzll
LzEvSS1SUlpNVnk3ZDVkOGxPUmZNRXFMZjA1aTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABU6M4D8n
RKtReR/KUXwhtCFMgxSyeFIZl8CJUH1M9aSZeaHxmVR5rsHGTjo7esDVbQQp3ISR
ca4XRJ24HEuaf8AB9IlEAwFtlUH9wnRBaypkViQ+0V0Yx6XdjwHW87UhjWgyIxvv
erfgwOQxfvscgl0QuA69i4k0DQSck9XywE7uI7tUAzb8hmWS8QdgoAH1U/Le9wRM
LLJ5HafspFpRqxnOPtchiRCXBTjx+U59r6ScOEOo+lbbt5xDmpcPZwXCjdf+3JI/
S2d+iSmxwLz7+JDNIC3gFUx0wuy/YlJTya9YzH/2V49Fcr1TxwjIMNyJtQ0oCZ+q
RUpN+vDtpGyGvA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:18:09 2025 by rpki-client